feat(appsync): add authenticationConfig to HttpDataSource, fixes #9934

packages/@aws-cdk/aws-appsync/lib/data-source.ts

@@ -203,6 +203,35 @@ export class DynamoDbDataSource extends BackedDataSource {
   }
 }
 
+/**
+ * The authorization config in case the HTTP endpoint requires authorization
+ */
+export interface HttpDataSourceAuthorizationConfig {
+  /**
+   * The authorization type required by the HTTP endpoint
+   */
+  readonly authorizationType: 'AWS_IAM';
+  /**
+   * The IAM configuration required by the HTTP endpoint
+   */
+  readonly awsIamConfig: HttpDataSourceIamConfig;
+}
+
+/**
+ * The IAM configuration required by the HTTP endpoint
+ */
+export interface HttpDataSourceIamConfig {
+  /**
+   * The signing region for AWS IAM authorization
+   */
+  readonly signingRegion: string;
+
+  /**
+   * The signing service name for AWS IAM authorization
+   */
+  readonly signingServiceName: string;
+}
+
 /**
  * Properties for an AppSync http datasource
  */
@@ -211,6 +240,7 @@ export interface HttpDataSourceProps extends BaseDataSourceProps {
    * The http endpoint
    */
   readonly endpoint: string;
+  readonly authorizationConfig?: HttpDataSourceAuthorizationConfig; 
 }
 
 /**
@@ -221,6 +251,7 @@ export class HttpDataSource extends BaseDataSource {
     super(scope, id, props, {
       httpConfig: {
         endpoint: props.endpoint,
+        authorizationConfig: props.authorizationConfig
       },
       type: 'HTTP',
     });

packages/@aws-cdk/aws-appsync/lib/graphqlapi-base.ts

@@ -1,7 +1,7 @@
 import { ITable } from '@aws-cdk/aws-dynamodb';
 import { IFunction } from '@aws-cdk/aws-lambda';
 import { CfnResource, IResource, Resource } from '@aws-cdk/core';
-import { DynamoDbDataSource, HttpDataSource, LambdaDataSource, NoneDataSource } from './data-source';
+import { DynamoDbDataSource, HttpDataSource, LambdaDataSource, NoneDataSource, HttpDataSourceAuthorizationConfig } from './data-source';
 
 /**
  * Optional configuration for data sources
@@ -22,6 +22,16 @@ export interface DataSourceOptions {
   readonly description?: string;
 }
 
+/**
+ * Optional configuration for Http data sources
+ */
+export interface HttpDataSourceOptions extends DataSourceOptions {
+  /**
+   * The authorization config in case the HTTP endpoint requires authorization
+   */
+  readonly authorizationConfig?: HttpDataSourceAuthorizationConfig; 
+}
+
 /**
  * Interface for GraphQL
  */
@@ -140,12 +150,13 @@ export abstract class GraphqlApiBase extends Resource implements IGraphqlApi {
    * @param endpoint The http endpoint
    * @param options The optional configuration for this data source
    */
-  public addHttpDataSource(id: string, endpoint: string, options?: DataSourceOptions): HttpDataSource {
+  public addHttpDataSource(id: string, endpoint: string, options?: HttpDataSourceOptions): HttpDataSource {
     return new HttpDataSource(this, id, {
       api: this,
       endpoint,
       name: options?.name,
       description: options?.description,
+      authorizationConfig: options?.authorizationConfig
     });
   }
 

packages/@aws-cdk/aws-appsync/test/appsync-http.test.ts

@@ -58,6 +58,35 @@ describe('Http Data Source configuration', () => {
     });
   });
 
+  test('appsync configures name, authorizationConfig correctly', () => {
+    // WHEN
+    api.addHttpDataSource('ds', endpoint, {
+      name: 'custom',
+      description: 'custom description',
+      authorizationConfig: {
+        authorizationType: 'AWS_IAM',
+        awsIamConfig: {
+          signingRegion: 'us-east-1',
+          signingServiceName: 'states'
+        }
+      }
+    });
+
+    // THEN
+    expect(stack).toHaveResourceLike('AWS::AppSync::DataSource', {
+      Type: 'HTTP',
+      Name: 'custom',
+      Description: 'custom description',
+      AuthorizationConfig: {
+        authorizationType: 'AWS_IAM',
+        awsIamConfig: {
+          signingRegion: 'us-east-1',
+          signingServiceName: 'states'
+        }
+      }
+    });
+  })
+
   test('appsync errors when creating multiple http data sources with no configuration', () => {
     // THEN
     expect(() => {